Data Protection

Privacy Policy

As the operator of the website located at www.maerklin.de (also referred to as the "Website"), we are responsible for the personal data of the user ("you") of this Website in accordance with applicable data protection laws, in particular the General Data Protection Regulation ("GDPR").

In the following, we will provide you with clear and concise information on which data is processed when you visit our Website, and on what legal basis. You will also receive information on how we protect your data technically and organizationally, and what rights you have vis-à-vis us and the competent supervisory authority.

1. Information on the Controller

Gebr. Märklin & Cie. GmbH Stuttgarter Straße 55-57 D-73033 Göppingen

Phone: +49 (0) 71 61 / 608-0 Fax: +49 (0) 71 61 / 69820 Email: service(at)maerklin.de

2. Data Protection Officer

We have appointed an internal data protection officer.

Andreas Zimmermann Liststraße 4 73035 Göppingen

Email: a.zimmermann(at)maerklin.de Phone: +49(0)7161-9880478

3. Processing of Your Personal Data

Informational Use of Our Website

When you visit our Website for informational purposes only, so-called log files are processed by our system and captured automatically.

The following log files are processed automatically:

• IP address of the requesting computer
• Type of internet browser used
• Operating system and its version
• User interface of the operating system
• Pages accessed
• Date and time of visit
• Time zone difference to Greenwich Mean Time (GMT)
• Access status/HTTP status code
• Amount of data transferred
• Referrer

The log files contain your IP address, but it is shortened before storage. Therefore, it is not possible to assign it to you, and your data is not stored together with other personal data.

Processing of the aforementioned data is necessary for the provision of our Website.

The legal basis for processing data for anonymization purposes is Art. 6 (1) lit. f GDPR.

4. Use of Offers

Club Account (Märklin Insider Club, Trix Club, LGB Club)

You can register for our (paid) clubs on our Website. To set up your club account, we require the following information from you:

First and last name, address, and country for billing purposes
Email address to send you confirmation and documents for setting up your account
Date of birth to verify your age and for fraud prevention

All other information is voluntary. The following voluntary information will be stored together with your data if you provide it to us:

Title (to address you)
Your telephone number (to contact you in case of questions regarding your membership)
Language selection (to provide our services in your language)

If you link your account in our online shop with your club account by entering your club number in your online shop account, your data will be merged. This serves the purpose of providing you with certain discounts and free shipping above a certain amount.

5. Payment Methods

If you select a payment provider on our Website to pay for your club membership, that provider will also receive your personal data, such as your name, address, and bank details.

Credit card: If you pay with your credit card on our Website, your credit card provider will receive information that you have placed an order with us. Your credit card provider may conduct a credit check. For more information, please refer to the website of your credit card provider.

Direct debit/advance payment: If you pay by direct debit on our Website, our bank receives your bank details for payment processing.

6. Contact Form

You can contact us electronically using our contact form, for example, to provide feedback or to ask us questions. If you use this option, you will transmit the following data to us:

Email address (to contact you)
First and last name (for abuse prevention purposes)
Message and subject
Telephone number (optional)

In addition to the data voluntarily provided by you, we store the time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f GDPR) in ensuring the security of our systems and preventing abuse. This data, which we additionally collect during your contact, will be deleted as soon as it is no longer needed, at the latest when your reason for contacting us has been fully resolved.

By submitting the contact form, you consent to us processing your data. The legal basis for processing your data for the purpose of processing your contact is Art. 6 (1) lit. a GDPR. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and your reason for contacting us has been fully clarified.

If your contact aims to conclude a contract with us, the additional legal basis for processing your personal data is Art. 6 (1) lit. b GDPR. This data will be stored for as long as it is necessary to fulfill the contract. Furthermore, we only store your data to comply with contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c GDPR).

7. Contact via Email

You have the option to contact us by email. Your personal data transmitted in the email will be stored by us. The data will not be passed on to third parties. The data will only be processed to process your contact. The legal basis for processing your data for the purpose of processing your contact is Art. 6 (1) lit. a GDPR. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and your reason for contacting us has been fully clarified.

If your email aims to conclude a contract with us, the additional legal basis for processing your personal data is Art. 6 (1) lit. b GDPR. This data will be stored for as long as it is necessary to fulfill the contract. Furthermore, we only store your data to comply with contractual or legal obligations (e.g. tax obligations).

You can revoke your consent to the processing of your personal data at any time by informing us by email at "service(at)maerklin.de". In this case, all personal data related to the conversation will be deleted and the conversation cannot be continued.

8. Newsletter

8.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. For sending the newsletter, we use the double opt-in procedure. This means that we will only send you an email newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. When you register for the newsletter, we store the IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time. The data collected by us when

registering for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further use your data, which is permitted by law and about which we inform you in this statement.

8.2 Newsletter dispatch via Inxmail

The dispatch of our email newsletter is carried out by the technical service provider Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany, to whom we transmit the data you provided when registering for the newsletter. This transmission is carried out in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. The data you entered for the purpose of subscribing to the newsletter (e.g. email address) is stored on Inxmail's servers in the EU.

Inxmail uses this information for sending and statistically evaluating the newsletters on our behalf. For the purpose of evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files that are stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked on. In addition, technical information is collected (e.g. time of access, IP address, browser type and operating system). The data is collected solely in pseudonymous form and is not linked to your other personal data, and direct personal identification is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

In addition, Inxmail may use this data in accordance with Art. 6 (1) lit. f GDPR for its own legitimate interest in designing and optimizing the service to meet the needs of the user and for market research purposes, such as determining the countries of origin of recipients. However, Inxmail does not use the data of our newsletter recipients to contact them directly or to pass the data on to third parties.

We have concluded an order processing agreement with Inxmail, in which we obligate Inxmail to protect the data of our customers and not to disclose it to third parties.

You can view Inxmail's data protection provisions here: https://www.inxmail.de/datenschutz

8.3 - Advertising by postal mail

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address, and - to the extent that we have received this additional information from you in the context of the contractual relationship - your title, academic degree, year of birth, and professional, industry or business designation in accordance with Art. 6 para. 1 lit. f GDPR and to use it to send interesting offers and information about our products by postal mail. You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the controller.

Right to object / unsubscribe from newsletter

You can unsubscribe or cancel our newsletter at any time. You will find the link to do so at the end of each newsletter. This will revoke your consent or object to any further use of your data for the purpose of sending newsletters.

9. Content Delivery Network

AWS-CloudFront (Amazon) We use the content delivery network ("CDN") "AWS CloudFront" from the service provider "Amazon" (Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg) on our website. A content delivery network is an online service that distributes large media files (such as graphics, page content, or scripts) through a network of regionally distributed servers connected over the Internet. The use of Amazon's content delivery network helps us optimize the loading speed of our website. Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in ensuring secure and efficient provision, as well as improving the stability and functionality of our website. For more information, please refer to Amazon's privacy policy at https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html.

10. Cookies

Please note the following: You can ensure that no cookies are stored on your computer, or that only certain cookies are allowed to be stored. You can select this in your internet browser settings. You can also view and delete stored cookies there.

If you block all cookies, it may be that not all functions of our website are available to you.

We use cookies on our website. Cookies are text files that are sent by our web server to your browser during your visit to our website and stored on your computer for later retrieval. Through a cookie, your internet browser can be identified when you revisit the website.

a. Own cookies

We use our own cookies to ensure the functionality of our website. Some elements of our website require your internet browser to be recognized again after a page change.

The legal basis for the processing of personal data in cookies that we set on our website to ensure the functionality of our website and our offer is Art. 6 (1) lit. f GDPR.

Right to object and removal

As stated at the beginning of this section, you can enable or restrict the transmission of cookies by changing the settings in your internet browser. You can delete cookies that have already been stored by your internet browser at any time. If cookies are restricted or deactivated for our website, it may be that not all functionalities can be used.

b. Third-party cookies

We use cookies from so-called "third-party providers" on our website. This means that during your visit to our website, data is transmitted from your web browser to the third party's web server and stored there.

aa. Google Analytics

Our website uses the Google Analytics analysis service from Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter referred to as "Google Analytics").

Google Analytics sets cookies that store the following information:

• Type of internet browser used
• Version of internetbrowser used
• Operating system used
• Referrer (previously visited website)
• Your truncated IP address
• Time of the server request

This information is used to analyze the use of our website and to compile reports on website activity. We use Google Analytics on the basis of Art. 6 para. 1 lit. f GDPR, which allows the processing of data for legitimate interests, in this case our interest in analyzing and improving the usability of our website.

You can prevent the storage of cookies by adjusting your browser settings accordingly. However, please note that if you do this, you may not be able to use the full functionality of our website. You can also prevent Google from collecting and processing data generated by the cookie about your use of the website by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout.

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://policies.google.com/privacy

We use the function of Google Analytics to anonymize your IP address before storage or processing. Your IP address is usually shortened within the European Union/European Economic Area and then transmitted to Google servers in the USA. The processing of your information is done pseudonymously, and we will not merge it with any other personal data from you.

We use the data collected for statistical purposes to optimize our website and offerings. The legal basis for this is Art. 6 (1) lit. f GDPR.

Furthermore, you can prevent Google from collecting and processing data related to your use of the website, including your IP address, by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=en).

You can also prevent the storage of Google cookies directly in your browser settings or prevent the processing of your data by clicking the following link to initiate an opt-out: please click this link. This will set an "opt-out cookie" that prevents the collection of your user data on this website.

You can find Google's privacy policy at the following link: https://policies.google.com/privacy?hl=en.